# Private keys - NEVER commit
*.key
ca.key
server.key
client.key

# Generated certificates (regenerate as needed)
certs/

# Temporary files
*.csr
*.srl
*.cnf
